Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

339,304

All time

Critical · Active

10,814

CVSS ≥ 9.0

New · 14 days

2,764

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27427	medium	6.5/10	WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability	May 26, 2026 1mo ago
CVE-2026-39642	medium	5.3/10	WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability	May 26, 2026 1mo ago
CVE-2026-39661	high	7.5/10	WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability	May 26, 2026 1mo ago
CVE-2026-39655	medium	5.3/10	WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability	May 26, 2026 1mo ago
CVE-2026-32389	medium	5.4/10	WordPress NanoCare theme < 1.2.2 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-42763	medium	6.5/10	WordPress SePay Gateway plugin <= 1.1.20 - Sensitive Data Exposure vulnerability	May 25, 2026 1mo ago
CVE-2026-42773	critical	9.3/10	WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability	May 25, 2026 1mo ago
CVE-2026-42774	critical	9.3/10	WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability	May 25, 2026 1mo ago
CVE-2026-42776	medium	6.3/10	WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-45209	high	7.5/10	WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-45216	high	8.8/10	WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability	May 25, 2026 1mo ago
CVE-2026-45217	medium	6.5/10	WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability	May 25, 2026 1mo ago
CVE-2026-45435	medium	6.5/10	WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability	May 25, 2026 1mo ago
CVE-2026-45438	high	7.5/10	WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-39436	high	7.1/10	WordPress CformsII plugin <= 15.1.3 - Cross Site Request Forgery (CSRF) vulnerability	May 25, 2026 1mo ago
CVE-2026-24937	high	7.2/10	WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability	May 25, 2026 1mo ago
CVE-2026-48837	high	8.5/10	WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability	May 25, 2026 1mo ago
CVE-2026-27357	medium	5.3/10	WordPress WP Search Analytics plugin < 1.5.0 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-27398	medium	5.3/10	WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-27346	medium	4.9/10	WordPress B2BKing plugin < 5.2.10 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-24554	medium	4.3/10	WordPress WPSubscription plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability	May 25, 2026 1mo ago
CVE-2026-24527	medium	4.3/10	WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.14.0 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2025-62745	medium	6.5/10	WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability	May 25, 2026 1mo ago
CVE-2026-24586	medium	5.4/10	WordPress Newses theme <= 2.0.0.77 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-24592	medium	5.3/10	WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-24582	medium	4.3/10	WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-24545	medium	4.3/10	WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability	May 25, 2026 1mo ago
CVE-2026-24574	medium	6.5/10	WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability	May 25, 2026 1mo ago
CVE-2026-24597	medium	4.3/10	WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability	May 25, 2026 1mo ago
CVE-2026-24546	medium	5.3/10	WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability	May 25, 2026 1mo ago